Application Security Assurance Standard

Who or what it applies to

A specific digital application, product, or defined application system.

What the certification covers

The named product and the approved application components, versions, APIs, services, and production environment stated on its certificate.

Major control domains

• Application scope
• Access control
• Application security
• Infrastructure
• Vulnerability management
• Incident response

What certification means

The named application has met the APSA 100 requirements within its approved scope. Certification applies only to the product, versions, components, and services stated on the certificate.

How certification works

Apply for assessment, agree the scope, provide evidence, complete the assessment, fix any non-conformities, and receive a separate certification decision. A Certificate of Conformity is issued only after approval.